OSVDB ID: 25591 Title: Apple Safari LaunchServices Long Extension Safe File Open Bypass |
Info |
|
|
Dates |
||||
|
|
Description |
Mac OS X contains a flaw that may allow a malicious user to cause Safari to automatically open unsafe content. The issue is triggered when long file name extensions are used to prevent Download Validation from correctly determining the file type. It is possible that the flaw may allow arbitrary code execution resulting in a loss of integrity. |
Classification |
Location:
Remote / Network Access
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Unknown Disclosure: OSVDB Verified |
Solution |
Install Apple Security Update 2006-003, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |